Back to feed
EUVD-2026-69066 · Published Sep 1, 2026
Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.
Technologies
Mozilla ThunderbirdMozilla Firefox
Weaknesses
CWE-416
CVSS scores
- v3.19.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=2059018
- https://www.mozilla.org/security/advisories/mfsa2026-82/
- https://www.mozilla.org/security/advisories/mfsa2026-83/
- https://www.mozilla.org/security/advisories/mfsa2026-84/
- https://www.mozilla.org/security/advisories/mfsa2026-85/
- https://www.mozilla.org/security/advisories/mfsa2026-86/
Potentially impacted assets
See if this affects your attack surface
